Author |
Message |
bonifatioNL Brekeke Junior Member
Joined: 05 Dec 2016 Posts: 5
Location: Netherlands
|
Posted: Mon Dec 05, 2016 8:52 am Post subject: BlockList automatically deletes User Authentication accounts |
|
|
1. Brekeke Product Name and Version:
3.6.3.0/454
2. Java version:
1.8.0_111
3. OS type and the version:
Windows server 2008
4. UA (phone), gateway or other hardware/software involved:
5. Your problem:
When migrating UA's from an old BSS towards this BSS 4 old UA's IP addresses got blocked by the blocklist feature. By adding the IP range to the allowed range in the filtering policy, the UA's were able to dial out, but could not be reached and they were not shown as registered. After checking the User Authentication files I discovered the UA's were deleted from the database. Is there a fix to prevent this from happening? |
|
Back to top |
|
snuyzm Brekeke Talented
Joined: 11 Feb 2015 Posts: 97
|
Posted: Tue Dec 06, 2016 3:43 am Post subject: |
|
|
How did you migrate from old SIP Server to the 3.6.3.0?
Is the old SIP Server installation still running separately? |
|
Back to top |
|
bonifatioNL Brekeke Junior Member
Joined: 05 Dec 2016 Posts: 5
Location: Netherlands
|
Posted: Tue Dec 06, 2016 3:53 am Post subject: |
|
|
Hi Snuyzm,
I have downloaded the user authentication files and dialplans from the old BSS and imported these in the new BSS. The old BSS virtual machine was decommissioned and the license was migrated to the new BSS. |
|
Back to top |
|
Harold Brekeke Master Guru
Joined: 21 Sep 2008 Posts: 287
Location: Japan
|
Posted: Fri Dec 09, 2016 10:37 pm Post subject: |
|
|
Have you tried to add these 4 users in the 3.6.3.0's [User Authentication] page manually? |
|
Back to top |
|
bonifatioNL Brekeke Junior Member
Joined: 05 Dec 2016 Posts: 5
Location: Netherlands
|
Posted: Sat Dec 10, 2016 1:28 am Post subject: |
|
|
Hi Harold, yes after discovering that the 4 accounts were deleted I manually added the 4 users back to the user authentication page and all is working fine. My point is that when BSS starts blocking IP addresses of UA's, it will also delete the accounts connected to these IP addresses from the User Authentication database. This is not documented anywhere and customers should be aware of this unexpected behaviour. |
|
Back to top |
|
Harold Brekeke Master Guru
Joined: 21 Sep 2008 Posts: 287
Location: Japan
|
Posted: Tue Dec 13, 2016 2:12 am Post subject: |
|
|
Since these 4 users were not listed in User Authentication database, the SIP Server couldn't confirm their validities. So the SIP server supposed that SIP packets sent from these IP address were malicious activities.
It is the reason why the SIP Server added them in the BlockList. |
|
Back to top |
|
bonifatioNL Brekeke Junior Member
Joined: 05 Dec 2016 Posts: 5
Location: Netherlands
|
Posted: Tue Dec 13, 2016 5:01 am Post subject: |
|
|
@Harold - my point is that these 4 UA's actually were listed in the user authentication database. They were delisted from this database when their IP adresses were blocked when the videophones for whatever reason could not register as should and the blocklist feature was activated. |
|
Back to top |
|
Harold Brekeke Master Guru
Joined: 21 Sep 2008 Posts: 287
Location: Japan
|
Posted: Tue Dec 13, 2016 9:31 am Post subject: |
|
|
Do/did you use non-English characters in these user names? |
|
Back to top |
|
bonifatioNL Brekeke Junior Member
Joined: 05 Dec 2016 Posts: 5
Location: Netherlands
|
Posted: Wed Dec 21, 2016 9:27 am Post subject: |
|
|
@Harold - unfortunately no non-English characters were used. After re-entry of exactly the same UA profiles in the User Authentication database all works fine, so there is no issue with characters. Given your questions I assume that you do not see a relationship between blocking UA's and automatically deleting the UA account data from the UA database. |
|
Back to top |
|
Haddas Brekeke Guru
Joined: 17 Jan 2008 Posts: 170
|
Posted: Wed Dec 21, 2016 1:07 pm Post subject: |
|
|
I've checked it with the developer and confirmed that the BlockList function doesn't remove any users from the User Authentication database. These functions are running independently.
The only way to add/remove a user is from the Admintool. |
|
Back to top |
|
|